<div dir="ltr"><div><div><div>Dear Mathias,<br><br></div>Could you attach a diagram of your network configuration and of what you are trying to achieve? <br>Are you trying to install OVS inside a VM? If so, why?<br><br></div>Greetings,<br></div>Benjamin<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 1, 2018 at 8:30 AM, Volodymyr Litovka <span dir="ltr"><<a href="mailto:doka.ua@gmx.com" target="_blank">doka.ua@gmx.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div text="#000000" bgcolor="#FFFFFF">
    Dear Mathias,<br>
    <br>
    if I correctly understand your configuration, you're using bridges
    inside VM and it configuration looks a bit strange:<br>
    <br>
    1) you use two different bridges (OVSbr1/192.168.120.x and
    OVSbr2/192.168.110.x) and there is no patch between them so they're
    separate<br>
    2) while ARP requests for address in OVSbr1 arrives from OVSbr2:<span class=""><br>
    <br>
    > 18:50:58.080478 ARP, Request who-has <b>192.168.120.10</b>
    tell 192.168.120.6, length 28 <br>
    ><br></span><span class="">
    > but on the OVS bridge nothing arrives ...<br>
    ><br></span><span class="">
    > listening on <b>OVSbr2</b>, link-type EN10MB (Ethernet),
    capture size<br>
    > 262144 bytes <br>
    <br></span>
    while these bridges are separate, ARP requests and answers will not
    be passed between them.<br>
    <br>
    Regarding your devstack configuration - unfortunately, I don't have
    experience with devstack, so don't know, where it stores configs. In
    Openstack, ml2_conf.ini points to openvswitch in ml2's
    mechanism_drivers parameter, in my case it looks as the following:<br>
    <br>
    [ml2]<br>
    mechanism_drivers = l2population,openvswitch<br>
    <br>
    and rest of openvswitch config described in
    /etc/neutron/plugins/ml2/<wbr>openvswitch_agent.ini<br>
    <br>
    Second - I see an ambiguity in your br-tun configuration, where
    patch_int is the same as patch-int without corresponding remote peer
    config, probably you should check this issue.<br>
    <br>
    And third is - note that Mitaka is quite old release and probably
    you can give a chance for the latest release of devstack? :-)<div><div class="h5"><br>
    <br>
    <div class="m_-5705901012298894910moz-cite-prefix">On 1/31/18 10:49 PM, Mathias Strufe
      (DFKI) wrote:<br>
    </div>
    <blockquote type="cite">Dear
      Volodymyr, all,
      <br>
      <br>
      thanks for your fast answer ...
      <br>
      but I'm still facing the same problem, still can't ping the
      instance with configured and up OVS bridge ... may because I'm
      quite new to OpenStack and OpenVswitch and didn't see the problem
      ;)
      <br>
      <br>
      My setup is devstack Mitaka in single machine config ... first of
      all I didn't find there the openvswitch_agent.ini anymore, I
      remember in previous version it was in the neutron/plugin folder
      ...
      <br>
      Is this config now done in the ml2 config file in the [OVS]
      section????
      <br>
      <br>
      <br>
      I'm really wondering ...
      <br>
      so I can ping between the 2 instances without any problem. But as
      soon I bring up the OVS bridge inside the vm the ARP requests only
      visible at the ens interface but not reaching the OVSbr ...
      <br>
      <br>
      please find attached two files which may help for troubleshooting.
      One are some network information from inside the Instance that
      runs the OVS and one ovs-vsctl info of the OpenStack Host.
      <br>
      <br>
      If you need more info/logs please let me know! Thanks for your
      help!
      <br>
      <br>
      BR Mathias.
      <br>
      <br>
      <br>
      On 2018-01-27 22:44, Volodymyr Litovka wrote:
      <br>
      <blockquote type="cite">Hi Mathias,
        <br>
        <br>
         whether you have all corresponding bridges and patches between
        them
        <br>
        as described in openvswitch_agent.ini using
        <br>
        <br>
         integration_bridge
        <br>
         tunnel_bridge
        <br>
         int_peer_patch_port
        <br>
         tun_peer_patch_port
        <br>
         bridge_mappings
        <br>
        <br>
         parameters? And make sure, that service "neutron-ovs-cleanup"
        is in
        <br>
        use during system boot. You can check these bridges and patches
        using
        <br>
        "ovs-vsctl show" command.
        <br>
        <br>
        On 1/27/18 9:00 PM, Mathias Strufe (DFKI) wrote:
        <br>
        <br>
        <blockquote type="cite">Dear all,
          <br>
          <br>
          I'm quite new to openstack and like to install openVSwtich
          inside
          <br>
          one Instance of our Mitika openstack Lab Enviornment ...
          <br>
          But it seems that ARP packets got lost between the network
          <br>
          interface of the instance and the OVS bridge ...
          <br>
          <br>
          With tcpdump on the interface I see the APR packets ...
          <br>
          <br>
          tcpdump: verbose output suppressed, use -v or -vv for full
          protocol
          <br>
          decode
          <br>
          listening on ens6, link-type EN10MB (Ethernet), capture size
          262144
          <br>
          bytes
          <br>
          18:50:58.080478 ARP, Request who-has 192.168.120.10 tell
          <br>
          192.168.120.6, length 28
          <br>
          18:50:58.125009 ARP, Request who-has 192.168.120.1 tell
          <br>
          192.168.120.6, length 28
          <br>
          18:50:59.077315 ARP, Request who-has 192.168.120.10 tell
          <br>
          192.168.120.6, length 28
          <br>
          18:50:59.121369 ARP, Request who-has 192.168.120.1 tell
          <br>
          192.168.120.6, length 28
          <br>
          18:51:00.077327 ARP, Request who-has 192.168.120.10 tell
          <br>
          192.168.120.6, length 28
          <br>
          18:51:00.121343 ARP, Request who-has 192.168.120.1 tell
          <br>
          192.168.120.6, length 28
          <br>
          <br>
          but on the OVS bridge nothing arrives ...
          <br>
          <br>
          tcpdump: verbose output suppressed, use -v or -vv for full
          protocol
          <br>
          decode
          <br>
          listening on OVSbr2, link-type EN10MB (Ethernet), capture size
          <br>
          262144 bytes
          <br>
          <br>
          I disabled port_security and removed the security group but
          nothing
          <br>
          changed
          <br>
          <br>
          <br>
        </blockquote>
+-----------------------+-----<wbr>------------------------------<wbr>------------------------------<wbr>----------------------+
        <br>
        <blockquote type="cite">
          <br>
          | Field | Value
          <br>
          |
          <br>
          <br>
        </blockquote>
+-----------------------+-----<wbr>------------------------------<wbr>------------------------------<wbr>----------------------+
        <br>
        <blockquote type="cite">
          <br>
          | admin_state_up | True
          <br>
          |
          <br>
          | allowed_address_pairs |
          <br>
          |
          <br>
          | binding:host_id | node11
          <br>
          |
          <br>
          | binding:profile | {}
          <br>
          |
          <br>
          | binding:vif_details | {"port_filter": true,
          "ovs_hybrid_plug":
          <br>
          true} |
          <br>
          | binding:vif_type | ovs
          <br>
          |
          <br>
          | binding:vnic_type | normal
          <br>
          |
          <br>
          | created_at | 2018-01-27T16:45:48Z
          <br>
          |
          <br>
          | description |
          <br>
          |
          <br>
          | device_id | 74916967-984c-4617-ae33-<wbr>b847de73de13
          <br>
          |
          <br>
          | device_owner | compute:nova
          <br>
          |
          <br>
          | extra_dhcp_opts |
          <br>
          |
          <br>
          | fixed_ips | {"subnet_id":
          <br>
          "525db7ff-2bf2-4c64-b41e-<wbr>1e41570ec358", "ip_address":
          <br>
          "192.168.120.10"} |
          <br>
          | id | 74b754d6-0000-4c2e-bfd1-<wbr>87f640154ac9
          <br>
          |
          <br>
          | mac_address | fa:16:3e:af:90:0c
          <br>
          |
          <br>
          | name |
          <br>
          |
          <br>
          | network_id | 917254cb-9721-4207-99c5-<wbr>8ead9f95d186
          <br>
          |
          <br>
          | port_security_enabled | False
          <br>
          |
          <br>
          | project_id | c48457e73b664147a3d2d36d75dcd1<wbr>55
          <br>
          |
          <br>
          | revision_number | 27
          <br>
          |
          <br>
          | security_groups |
          <br>
          |
          <br>
          | status | ACTIVE
          <br>
          |
          <br>
          | tenant_id | c48457e73b664147a3d2d36d75dcd1<wbr>55
          <br>
          |
          <br>
          | updated_at | 2018-01-27T18:54:24Z
          <br>
          |
          <br>
          <br>
        </blockquote>
+-----------------------+-----<wbr>------------------------------<wbr>------------------------------<wbr>----------------------+
        <br>
        <blockquote type="cite">
          <br>
          <br>
          maybe the port_filter causes still the problem? But how to
          disable
          <br>
          it?
          <br>
          <br>
          Any other idea?
          <br>
          <br>
          Thanks and BR Mathias.
          <br>
          <br>
          ______________________________<wbr>_________________
          <br>
          Mailing list:
          <br>
          <a class="m_-5705901012298894910moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a>
          [1]
          <br>
          Post to : <a class="m_-5705901012298894910moz-txt-link-abbreviated" href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a>
          <br>
          Unsubscribe :
          <br>
          <a class="m_-5705901012298894910moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a>
          [1]
          <br>
        </blockquote>
        <br>
        --
        <br>
        Volodymyr Litovka
        <br>
         "Vision without Execution is Hallucination." -- Thomas Edison
        <br>
        <br>
        <br>
        Links:
        <br>
        ------
        <br>
        [1]
        <a class="m_-5705901012298894910moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a>
        <br>
      </blockquote>
      <br>
    </blockquote>
    <br>
    <pre class="m_-5705901012298894910moz-signature" cols="72">-- 
Volodymyr Litovka
  "Vision without Execution is Hallucination." -- Thomas Edison</pre>
  </div></div></div>

<br>______________________________<wbr>_________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br>
Post to     : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank">http://lists.openstack.org/<wbr>cgi-bin/mailman/listinfo/<wbr>openstack</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><img src="http://www.whitestack.com/static/logos/whitestack_signature.png" width="96" height="16"><span><font color="#888888"><br><b><font size="2">Benjamín Díaz</font></b><br>Cloud Computing Engineer</font></span><br><br></div><img src="http://www.whitestack.com/static/email-icon.png"><a href="mailto:bdiaz@whitestack.com" target="_blank"> bdiaz@whitestack.com</a></div></div>
</div>